CVE-2001-1010

Опубликовано: 22 июл. 2001

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Directory traversal vulnerability in pagecount CGI script in Sambar Server before 5.0 beta 5 allows remote attackers to overwrite arbitrary files via a .. (dot dot) attack on the page parameter.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2001-07/0565.html
Vendor Advisory
http://www.sambar.com/security.htm
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/3092
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6916
http://archives.neohapsis.com/archives/bugtraq/2001-07/0565.html
Vendor Advisory
http://www.sambar.com/security.htm
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/3092
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6916

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sambar:sambar_server:4.4:*:*:*:*:*:*:*

cpe:2.3:a:sambar:sambar_server:5.0:beta1:*:*:*:*:*:*

cpe:2.3:a:sambar:sambar_server:5.0:beta2:*:*:*:*:*:*

cpe:2.3:a:sambar:sambar_server:5.0:beta3:*:*:*:*:*:*

cpe:2.3:a:sambar:sambar_server:5.0:beta4:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.05053

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-mwvx-xw2j-2vg6

github

больше 3 лет назад